Missing input validation for catalog zones (CVE-2026-42388) | HOL Guard CVE